CVE-2025-20216: cisco catalyst_sd-wan_manager Injection

CVSS: 4.7v3.1MediumAnalyzed

Published 07-05-2025Last modified 07-05-2025

Vulnerability summary

CVE-2025-20216 is a medium (CVSS 4.7) Injection vulnerability in cisco catalyst_sd-wan_manager. EPSS estimates a 0.34% chance of exploitation in the next 30 days, higher than 26% of scored vulnerabilities.

Overall risk

19/100

0100

Low · default modelHow is this calculated?

CVSS score

4.7/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.34%

0%100%

Low · +0.01 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

07-05-2025
PublishedVulnerability first disclosed.
07-05-2025
Last modifiedVulnerability information updated.

Description

A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user. This vulnerability is due to improper sanitization of input to the web interface. An attacker could exploit this vulnerability by convincing an authenticated user to click a malicious link. A successful exploit could allow the attacker to inject HTML into the browser of an authenticated Cisco Catalyst SD-WAN Manager user.

CVSS metrics

2 scores · 2 sources · 1 version

v3.14.7

EPSS trend

Probability

0.34%

Chance of exploitation in the next 30 days

Percentile

26%

Versus all other CVEs

30-day change

+0.01 pp

From 0.33% on 18-09-2026

18-09-202618-10-2026

EPSS score

0.34%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Affected systems

Cisco2 products

catalyst_sd-wan_manager17.2.4 | 17.2.5 | 17.2.6 | 17.2.7 | 17.2.8 | 17.2.9 | 17.2.10 | 18.2.0 | 18.3.0 | 18.3.1 | 18.3.1.1 | 18.3.3 | 18.3.3.1 | 18.3.4 | 18.3.5 | 18.3.6 | 18.3.6.1 | 18.3.7 | 18.3.8 | 18.4.0 | 18.4.0.1 | 18.4.1 | 18.4.3 | 18.4.4 | 18.4.5 | 18.4.6 | 18.4.302 | 18.4.303 | 18.4.501_es | 19.0.0 | 19.0.1a | 19.1.0 | 19.2.0 | 19.2.1 | 19.2.2 | 19.2.3 | 19.2.4 | 19.2.4.0.1 | 19.2.4.0.8 | 19.2.4.0.9 | 19.2.31 | 19.2.32 | 19.2.097 | 19.2.098 | 19.2.099 | 19.2.929 | 19.3.0 | 20.1.1 | 20.1.1.1 | 20.1.2 | 20.1.2_937 | 20.1.3 | 20.13.1 | 20.1.12 | 20.3.1 | 20.3.2 | 20.3.2.0.5 | 20.3.2.0.6 | 20.3.2.1 | 20.3.2.1_927 | 20.3.2.1_930 | 20.3.2_925 | 20.3.2_928 | 20.3.2_929 | 20.3.2_937 | 20.3.3 | 20.3.3.0.2 | 20.3.3.0.4 | 20.3.3.0.8 | 20.3.3.0.14 | 20.3.3.0.16 | 20.3.3.0.17 | 20.3.3.0.18 | 20.3.3.1 | 20.3.3.1.1 | 20.3.3.1.2 | 20.3.3.1.5 | 20.3.3.1.7 | 20.3.3.1.10 | 20.3.3.2 | 20.3.4 | 20.3.4.0.1 | 20.3.4.0.5 | 20.3.4.0.6 | 20.3.4.0.9 | 20.3.4.0.11 | 20.3.4.0.19 | 20.3.4.0.20 | 20.3.4.0.24 | 20.3.4.0.25 | 20.3.4.0.26 | 20.3.4.1 | 20.3.4.1.1 | 20.3.4.1.2 | 20.3.4.2 | 20.3.4.2.1 | 20.3.4.2.2 | 20.3.4.3 | 20.3.5 | 20.3.5.0.7 | 20.3.5.0.8 | 20.3.5.0.9 | 20.3.5.1 | 20.3.6 | 20.3.7 | 20.3.7.1 | 20.3.7.2 | 20.3.8 | 20.3.813 | 20.3.814 | 20.4.1 | 20.4.1.0.01 | 20.4.1.0.1 | 20.4.1.0.02 | 20.4.1.1 | 20.4.1.1.5 | 20.4.1.2 | 20.4.2 | 20.4.2.0.1 | 20.4.2.0.2 | 20.4.2.0.4 | 20.4.2.1 | 20.4.2.1.1 | 20.4.2.2 | 20.4.2.2.1 | 20.4.2.2.2 | 20.4.2.2.3 | 20.4.2.2.4 | 20.4.2.2.8 | 20.4.2.3 | 20.5.0.1.1 | 20.5.1 | 20.5.1.0.1 | 20.5.1.0.2 | 20.5.1.1 | 20.5.1.2 | 20.6.0.18.3 | 20.6.0.18.4 | 20.6.1 | 20.6.1.0.1 | 20.6.1.1 | 20.6.1.2 | 20.6.2 | 20.6.2.0.4 | 20.6.2.1 | 20.6.2.2 | 20.6.2.2.2 | 20.6.2.2.3 | 20.6.2.2.4 | 20.6.2.2.7 | 20.6.3 | 20.6.3.0.2 | 20.6.3.0.5 | 20.6.3.0.7 | 20.6.3.0.10 | 20.6.3.0.11 | 20.6.3.0.14 | 20.6.3.0.18 | 20.6.3.0.19 | 20.6.3.0.23 | 20.6.3.0.25 | 20.6.3.0.27 | 20.6.3.0.29 | 20.6.3.0.31 | 20.6.3.0.32 | 20.6.3.0.33 | 20.6.3.0.38 | 20.6.3.0.39 | 20.6.3.0.40 | 20.6.3.0.41 | 20.6.3.0.45 | 20.6.3.0.46 | 20.6.3.0.47 | 20.6.3.0.51 | 20.6.3.1 | 20.6.3.1.1 | 20.6.3.2 | 20.6.3.3 | 20.6.3.4 | 20.6.4 | 20.6.4.0.4 | 20.6.4.0.19 | 20.6.4.0.21 | 20.6.4.1 | 20.6.4.2 | 20.6.5 | 20.6.5.1 | 20.6.5.1.2 | 20.6.5.1.3 | 20.6.5.1.4 | 20.6.5.1.5 | 20.6.5.1.6 | 20.6.5.1.7 | 20.6.5.1.9 | 20.6.5.1.10 | 20.6.5.1.11 | 20.6.5.1.13 | 20.6.5.1.14 | 20.6.5.2 | 20.6.5.2.1 | 20.6.5.2.3 | 20.6.5.2.4 | 20.6.5.2.8 | 20.6.5.3 | 20.6.5.4 | 20.6.5.5 | 20.6.6 | 20.6.6.0.1 | 20.6.7 | 20.6.8 | 20.7.1 | 20.7.1.0.2 | 20.7.1.1 | 20.7.1eft2 | 20.7.2 | 20.8.1 | 20.9.1 | 20.9.1.1 | 20.9.1eft2 | 20.9.2 | 20.9.2.0.01 | 20.9.2.1 | 20.9.2.2 | 20.9.2.3 | 20.9.3 | 20.9.3.0.2 | 20.9.3.0.3 | 20.9.3.0.4 | 20.9.3.0.5 | 20.9.3.0.7 | 20.9.3.0.8 | 20.9.3.0.12 | 20.9.3.0.16 | 20.9.3.0.17 | 20.9.3.0.18 | 20.9.3.0.20 | 20.9.3.0.21 | 20.9.3.0.23 | 20.9.3.0.24 | 20.9.3.0.25 | 20.9.3.0.26 | 20.9.3.0.29 | 20.9.3.1 | 20.9.3.2 | 20.9.4 | 20.9.4.0.4 | 20.9.4.1 | 20.9.4.1.1 | 20.9.4.1.3 | 20.9.4.1.6 | 20.9.5 | 20.9.5.1 | 20.9.5.1.4 | 20.9.5.2 | 20.9.5.2.1 | 20.9.5.2.7 | 20.9.5.2.13 | 20.9.5.2.14 | 20.9.5.2.16 | 20.9.5.2.21 | 20.9.5.3 | 20.9.6 | 20.9.6.0.3 | 20.10.1 | 20.10.1.1 | 20.10.1.2 | 20.11.1.1 | 20.11.1.2 | 20.12.1 | 20.12.2 | 20.12.3 | 20.12.3.1 | 20.12.4 | 20.12.4.0.03 | 20.12.4.0.4 | 20.12.4.0.6 | 20.12.4.1 | 20.12.401 | 20.14.1 | 20.15.1
cisco catalyst sd-wan manager20.1.12 | 19.2.1 | 18.4.4 | 18.4.5 | 20.11.1 | 20.1.1 | 19.3.0 | 19.2.2 | 19.2.099 | 18.3.6 | 18.3.7 | 19.2.0 | 18.3.8 | 19.0.0 | 19.1.0 | 18.4.302 | 18.4.303 | 19.2.097 | 19.2.098 | 17.2.10 | 18.3.6.1 | 19.0.1a | 18.2.0 | 18.4.3 | 18.4.1 | 17.2.8 | 18.3.3.1 | 18.4.0 | 18.3.1 | 17.2.6 | 17.2.9 | 18.3.4 | 17.2.5 | 18.3.1.1 | 18.3.5 | 18.4.0.1 | 18.3.3 | 17.2.7 | 17.2.4 | 18.3.0 | 19.2.3 | 18.4.501_ES | 20.3.1 | 20.1.2 | 19.2.929 | 19.2.31 | 20.3.2 | 19.2.32 | 20.3.2_925 | 20.3.2.1 | 20.3.2.1_927 | 18.4.6 | 20.1.2_937 | 20.4.1 | 20.3.2_928 | 20.3.2_929 | 20.4.1.0.1 | 20.3.2.1_930 | 19.2.4 | 20.5.0.1.1 | 20.4.1.1 | 20.3.3 | 19.2.4.0.1 | 20.3.2_937 | 20.3.3.1 | 20.5.1 | 20.1.3 | 20.3.3.0.4 | 20.3.3.1.2 | 20.3.3.1.1 | 20.4.1.2 | 20.3.3.0.2 | 20.4.1.1.5 | 20.4.1.0.01 | 20.4.1.0.02 | 20.3.3.1.7 | 20.3.3.1.5 | 20.5.1.0.1 | 20.3.3.1.10 | 20.3.3.0.8 | 20.4.2 | 20.4.2.0.1 | 20.3.4 | 20.3.3.0.14 | 19.2.4.0.8 | 19.2.4.0.9 | 20.3.4.0.1 | 20.3.2.0.5 | 20.6.1 | 20.5.1.0.2 | 20.3.3.0.17 | 20.6.1.1 | 20.6.0.18.3 | 20.3.2.0.6 | 20.6.0.18.4 | 20.4.2.0.2 | 20.3.3.0.16 | 20.3.4.0.5 | 20.6.1.0.1 | 20.3.4.0.6 | 20.6.2 | 20.7.1EFT2 | 20.3.4.0.9 | 20.3.4.0.11 | 20.4.2.0.4 | 20.3.3.0.18 | 20.7.1 | 20.6.2.1 | 20.3.4.1 | 20.5.1.1 | 20.4.2.1 | 20.4.2.1.1 | 20.3.4.1.1 | 20.3.813 | 20.3.4.0.19 | 20.4.2.2.1 | 20.5.1.2 | 20.3.4.2 | 20.3.814 | 20.4.2.2 | 20.6.2.2 | 20.3.4.2.1 | 20.7.1.1 | 20.3.4.1.2 | 20.6.2.2.2 | 20.3.4.0.20 | 20.6.2.2.3 | 20.4.2.2.2 | 20.3.5 | 20.6.2.0.4 | 20.4.2.2.3 | 20.3.4.0.24 | 20.6.2.2.7 | 20.6.3 | 20.3.4.2.2 | 20.4.2.2.4 | 20.7.1.0.2 | 20.8.1 | 20.3.5.0.8 | 20.3.5.0.9 | 20.4.2.2.8 | 20.3.5.0.7 | 20.6.3.0.7 | 20.6.3.0.5 | 20.6.3.0.10 | 20.6.3.0.2 | 20.7.2 | 20.9.1EFT2 | 20.6.3.0.11 | 20.6.3.1 | 20.6.3.0.14 | 20.6.4 | 20.9.1 | 20.6.3.0.19 | 20.6.3.0.18 | 20.3.6 | 20.9.1.1 | 20.6.3.0.23 | 20.6.4.0.4 | 20.6.3.0.25 | 20.6.5 | 20.6.3.0.27 | 20.9.2 | 20.9.2.1 | 20.6.3.0.29 | 20.6.3.0.31 | 20.6.3.0.32 | 20.10.1 | 20.6.3.0.33 | 20.9.2.0.01 | 20.9.1_LI_Images | 20.10.1_LI_Images | 20.9.2_LI_Images | 20.3.7 | 20.9.3 | 20.6.5.1 | 20.11.1_LI_Images | 20.9.3_LI_ Images | 20.6.3.1.1 | 20.9.3.0.2 | 20.6.5.1.2 | 20.9.3.0.3 | 20.4.2.3 | 20.6.3.2 | 20.6.4.1 | 20.6.3.0.38 | 20.6.3.0.39 | 20.3.5.1 | 20.3.4.3 | 20.9.3.1 | 20.3.3.2 | 20.6.5.2 | 20.3.7.1 | 20.10.1.1 | 20.6.5.2.1 | 20.3.4.0.25 | 20.6.2.2.4 | 20.6.1.2 | 20.11.1.1 | 20.9.3.0.5 | 20.3.4.0.26 | 20.6.5.1.3 | 20.6.3.0.40 | 20.13.1 | 20.9.2.2 | 20.6.5.2.3 | 20.6.5.1.4 | 20.6.5.3 | 20.6.3.0.41 | 20.9.3.0.7 | 20.6.5.1.5 | 20.9.3.0.4 | 20.6.4.0.19 | 20.6.5.1.6 | 20.9.3.0.8 | 20.6.3.3 | 20.3.7.2 | 20.6.5.4 | 20.6.5.1.7 | 20.9.3.0.12 | 20.6.4.2 | 20.6.5.5 | 20.9.3.2 | 20.11.1.2 | 20.6.3.4 | 20.10.1.2 | 20.6.5.1.9 | 20.9.3.0.16 | 20.6.3.0.45 | 20.6.5.1.10 | 20.9.3.0.17 | 20.6.5.2.4 | 20.6.4.0.21 | 20.9.3.0.18 | 20.6.3.0.46 | 20.6.3.0.47 | 20.9.2.3 | 20.9.3.2_LI_Images | 20.9.3.0.21 | 20.9.3.0.20 | 20.9.4_LI_Images | 20.9.4 | 20.6.5.1.11 | 20.12.1 | 20.12.1_LI_Images | 20.6.5.1.13 | 20.9.3.0.23 | 20.6.5.2.8 | 20.9.4.1 | 20.9.4.1_LI_Images | 20.9.3.0.25 | 20.9.3.0.24 | 20.6.5.1.14 | 20.3.8 | 20.6.6 | 20.9.3.0.26 | 20.6.3.0.51 | 20.9.3.0.29 | 20.12.2 | 20.12.2_LI_Images | 20.6.6.0.1 | 20.13.1_LI_Images | 20.9.4.0.4 | 20.9.4.1.1 | 20.9.5 | 20.9.5_LI_Images | 20.12.3_LI_Images | 20.12.3 | 20.9.4.1.3 | 20.6.7 | 20.9.5.1 | 20.9.5.1_LI_Images | 20.9.4.1.6 | 20.14.1 | 20.14.1_LI_Images | 20.9.5.2 | 20.9.5.2.1 | 20.9.5.2_LI_Images | 20.12.3.1 | 20.12.4 | 20.15.1_LI_Images | 20.15.1 | 20.9.5.1.4 | 20.9.5.2.7 | 20.9.5.2.13 | 20.9.6 | 20.9.6_LI_Images | 20.9.5.2.14 | 20.6.8 | 20.12.4.0.03 | 20.12.4_LI_Images | 20.9.5.2.16 | 20.12.4.0.4 | 20.12.401 | 20.9.5.3 | 20.9.5.3_LI_Images | 20.12.4.1_LI_Images | 20.12.4.1 | 20.9.5.2.21 | 20.9.6.0.3 | 20.12.4.0.6

1 vendor · 2 products

References

1 links

sec.cloudapps.cisco.com/security/…Vendor Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities